video-production

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes npx remotion preview and npx remotion render commands to execute the video generation and rendering process from generated TypeScript code.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It ingests untrusted data from user prompts to define the structure, text, and scenes of the video. The skill does not implement boundary markers or instructions to ignore embedded commands, nor does it specify sanitization of the input text. The agent has the capability to execute subprocesses and generate code based on this data.- [EXTERNAL_DOWNLOADS]: The skill relies on npx to dynamically fetch the Remotion framework and its dependencies from the npm registry. While npm is a well-known service, this involves downloading and executing external code at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 05:33 AM